$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: Bt7Sn59foOSW8Toi9lFA+zjMgx6Rg+TMSLV5iDfW+qs= Subject key identifier: 42:BA:D7:2C:4B:4F:CF:C3:0B:72:52:21:FD:5D:3E:91:4E:44:77:A9 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 349D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 3494 Signing time: Sat 14 Jun 2025 14:33:45 +0000 Manifest this update: Sat 14 Jun 2025 14:33:44 +0000 Manifest next update: Sat 21 Jun 2025 14:33:44 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: uLjHbQlcakRUFE+AVHbkJYfd8cfx76ztaAT2FEEZAoA=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13469 (0x349d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Jun 14 14:33:44 2025 GMT Not After : Jun 21 14:33:44 2025 GMT Subject: CN=684d8849-e7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:8a:57:b5:c6:c6:86:5c:f4:96:ad:d4:b6: e9:a3:7a:ac:c7:51:86:bb:54:b8:d6:43:ba:df:06: ec:bb:04:ac:a9:a8:aa:95:1f:95:df:51:06:77:bb: cf:04:a5:02:be:b3:05:51:82:cb:d8:2e:54:67:d8: 6d:8d:81:54:e1:8e:ff:28:84:81:f8:e0:31:ea:56: 38:7c:ae:68:73:e0:5a:a5:50:ec:25:30:51:c4:7a: 0a:dd:71:07:8a:40:2e:e9:bd:16:dc:c6:32:a1:0b: c9:bb:c8:2c:65:51:29:b5:58:36:6e:a0:b8:50:d4: 9a:d6:f3:fc:2e:2f:32:91:25:e2:f9:c0:54:80:6b: 5f:ba:c1:92:c4:90:60:de:98:eb:99:a9:66:06:fd: 36:51:71:50:2a:9c:32:e0:b3:56:6b:f5:7e:07:42: 19:38:36:e3:72:9d:d6:6c:8b:ef:d8:12:d6:00:cc: d1:1e:1e:2b:4d:8e:ac:33:f6:1c:8a:cd:62:4e:d8: e7:fe:14:73:20:8c:0f:2e:a8:bd:05:77:3b:f5:dc: 31:ac:43:a1:db:6d:da:eb:96:17:00:85:16:f8:d2: 76:d6:74:44:4d:5d:20:c1:d4:e3:73:44:0c:e2:2d: bd:c5:e2:4f:55:cf:38:eb:19:f8:b7:97:2c:82:a0: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:D7:2C:4B:4F:CF:C3:0B:72:52:21:FD:5D:3E:91:4E:44:77:A9 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d2:e9:9a:3b:10:cc:ae:91:76:65:e6:bf:93:d4:51:73:59: a7:1a:97:6b:0d:52:37:86:f2:dd:61:a7:c4:81:4e:84:04:55: 6a:c1:14:03:1c:fb:ac:2c:5c:5b:3e:f4:25:a3:7e:a2:bd:b1: 99:a1:1a:68:7d:70:3a:3a:ad:2d:1e:60:1e:ad:51:a8:8f:71: 8e:c8:ad:eb:31:9b:10:9a:3b:d2:92:5e:63:6d:08:38:a5:2e: 13:24:5a:be:3f:27:d4:61:48:1f:a2:e5:91:c7:6f:46:23:3a: 9d:bf:58:7d:b4:a5:7f:32:27:74:0d:65:62:6e:ec:aa:67:f5: 45:e5:50:0c:bc:d4:2e:56:a0:24:64:2a:e5:8c:e3:c0:af:96: 8f:19:a8:cb:3f:eb:7b:92:dc:b3:a6:b5:88:f4:cf:b9:c5:5a: 2f:70:98:e9:c3:32:f5:ad:92:b6:e5:f0:a9:1d:2b:84:a5:b1: cf:8a:98:10:52:8b:7e:d5:bc:87:55:a2:c3:df:3c:d8:6a:ef: c6:d5:d6:ba:67:9d:94:98:e7:82:11:0f:f8:a3:b7:6d:57:30: d0:02:66:c8:a9:68:75:62:17:ae:29:45:d4:7a:a0:2b:f9:97: c5:b2:79:93:2a:09:9c:41:d6:83:29:e1:24:15:6a:c5:78:b6: d7:32:e8:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNjE0MTQzMzQ0WhcNMjUwNjIxMTQzMzQ0WjAYMRYwFAYD VQQDEw02ODRkODg0OS1lN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2eKV7XGxoZc9Jat1Lbpo3qsx1GGu1S41kO63wbsuwSsqaiqlR+V31EGd7vP BKUCvrMFUYLL2C5UZ9htjYFU4Y7/KISB+OAx6lY4fK5oc+BapVDsJTBRxHoK3XEH ikAu6b0W3MYyoQvJu8gsZVEptVg2bqC4UNSa1vP8Li8ykSXi+cBUgGtfusGSxJBg 3pjrmalmBv02UXFQKpwy4LNWa/V+B0IZODbjcp3WbIvv2BLWAMzRHh4rTY6sM/Yc is1iTtjn/hRzIIwPLqi9BXc79dwxrEOh223a65YXAIUW+NJ21nRETV0gwdTjc0QM 4i29xeJPVc846xn4t5csgqApAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK61yxL T8/DC3JSIf1dPpFORHepMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0umaOxDMrpF2Zea/k9RRc1mnGpdrDVI3hvLdYafEgU6EBFVqwRQD HPusLFxbPvQlo36ivbGZoRpofXA6Oq0tHmAerVGoj3GOyK3rMZsQmjvSkl5jbQg4 pS4TJFq+PyfUYUgfouWRx29GIzqdv1h9tKV/Mid0DWVibuyqZ/VF5VAMvNQuVqAk ZCrljOPAr5aPGajLP+t7ktyzprWI9M+5xVovcJjpwzL1rZK25fCpHSuEpbHPipgQ Uot+1byHVaLD3zzYau/G1da6Z52UmOeCEQ/4o7dtVzDQAmbIqWh1YheuKUXUeqAr +ZfFsnmTKgmcQdaDKeEkFWrFeLbXMuiT -----END CERTIFICATE-----Generated at Sun Jun 15 10:22:54 2025 by rpki-client